How to remove KMSELDI.exe

KMSELDI.exe Removal: How to Get Rid of KMSELDI.exe06810ebac68abae1ea11b3f399f87dc1

KMSELDI.exe

The module KMSELDI.exe has been detected as Hack.KMS

KMSELDI.exe
Product Name:

KMS GUI ELDI

Company Name:

@ByELDI

MD5: 06810ebac68abae1ea11b3f399f87dc1
Size: 1 MB
First Published: 2017-06-10 14:04:58 (2 years ago)
Latest Published: 2019-06-25 14:06:25 (4 months ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-06-25 14:06:25 (4 months ago)
Signed By: @ByELDI
Status: Valid
%programfiles%\kmspico
%desktop%\программы\активация\kmspico_10.0.7_beta\kmspicoportable.rar
%desktop%\kmspicoportable
%programfiles%
%sysdrive%\activators\kmspico_10.0.7_beta
%sysdrive%\d\cha_win_7_sp1_professional_zh_tw\kmspico.v10.0.7
%desktop%\várias pastas\kmspico 10.0.7 beta + portable [activador de windows @amp; office] [zs]
%sysdrive%\$recycle.bin\s-1-5-21-3024158017-454659238-1331604641-1001\$rig4fq2
%sysdrive%\0000\software
%sysdrive%\software\activator windows + office\activate\kmspico_10.0.7-sb
30.9%
18.2%
7.3%
5.5%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
1.8%
1.8%
1.8%
1.8%
1.8%
1.8%
1.8%
1.8%
1.8%
Windows 10 78.6%
Windows 7 12.5%
Windows 8.1 7.1%
Windows 8 1.8%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x001160be

.NET Info:

MVID: 173fd84a-3b4f-4707-a659-8ad8cf4f5123

PE Sections:

Name Size of data MD5
.text 1131008 b8e68516bf5e05146439b5bca0ba65f4
.rsrc 20992 6f17a55a0fd8e687943dfa2eb7765234
.reloc 512 c74a38b0a864b930c0abd7637125364d

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSELDI.exe